diff options
| author | Daan De Meyer <daan.j.demeyer@gmail.com> | 2024-11-27 20:20:51 +0100 |
|---|---|---|
| committer | Luca Boccassi <luca.boccassi@gmail.com> | 2024-11-29 01:40:36 +0100 |
| commit | aed18d7e9a4811f941c149c5d96cb3cc428a3430 (patch) | |
| tree | aa0d8871ec321cd6b13969aeadc12e7bb7a55392 /mkosi.sanitizers | |
| parent | Typo fix in man/systemd.resource-control (diff) | |
| download | systemd-aed18d7e9a4811f941c149c5d96cb3cc428a3430.tar.xz systemd-aed18d7e9a4811f941c149c5d96cb3cc428a3430.zip | |
mkosi: Simplify sanitizer setup
Let's get rid of 20-sanitizers.conf and just move it into
mkosi.sanitizers instead.
Diffstat (limited to 'mkosi.sanitizers')
| -rw-r--r-- | mkosi.sanitizers/mkosi.conf | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/mkosi.sanitizers/mkosi.conf b/mkosi.sanitizers/mkosi.conf index 844541ce8b..0137d4e38d 100644 --- a/mkosi.sanitizers/mkosi.conf +++ b/mkosi.sanitizers/mkosi.conf @@ -3,3 +3,20 @@ [Match] Environment=SANITIZERS Environment=!SANITIZERS= + +[Build] +# Set verify_asan_link_order=0 to prevent ASAN warnings when building the image and make sure the real ASAN +# options are set when booting the image. +# Set intercept_tls_get_addr=0 to work around leak sanitizer segmentation fault in test-dlopen-so on CentOS +# Stream 9. +# TODO: Drop intercept_tls_get_addr=0 when we remove CentOS Stream 9 builds. +Environment=ASAN_OPTIONS=verify_asan_link_order=0:intercept_tls_get_addr=0 + +[Content] +KernelCommandLine= + ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1 + systemd.setenv=ASAN_OPTIONS=strict_string_checks=1:detect_stack_use_after_return=1:check_initialization_order=1:strict_init_order=1:disable_coredump=0:use_madv_dontdump=1 + UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1 + systemd.setenv=UBSAN_OPTIONS=print_stacktrace=1:print_summary=1:halt_on_error=1 + LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions + systemd.setenv=LSAN_OPTIONS=suppressions=/usr/lib/systemd/leak-sanitizer-suppressions |